Malware

Malware.AI.1526175635 removal

Malware Removal

The Malware.AI.1526175635 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.
6-day free trial available.

What Malware.AI.1526175635 virus can do?

  • Behavioural detection: Executable code extraction – unpacking
  • Sample contains Overlay data
  • Uses Windows utilities for basic functionality
  • Reads data out of its own binary image
  • The binary contains an unknown PE section name indicative of packing
  • Authenticode signature is invalid
  • Behavioural detection: Injection (inter-process)
  • Attempts to modify proxy settings
  • Deletes executed files from disk
  • Touches a file containing cookies, possibly for information gathering
  • Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1526175635?


File Info:

name: D702ECA00EAC266365CC.mlw
path: /opt/CAPEv2/storage/binaries/b33ed297d6e2326ca79619caa34fa8108d1745fdcf8b2b7ddd2754ab4c59deb9
crc32: A7579F9B
md5: d702eca00eac266365cc5f38fb0e0ee1
sha1: 4d526f6ebff597eb45f14080dc2272ef8005e48a
sha256: b33ed297d6e2326ca79619caa34fa8108d1745fdcf8b2b7ddd2754ab4c59deb9
sha512: 3f72b2c631872294acb99c5e8fb8f9c5339456d540b94a4c2de8bd56ea77476296f3f0f16fa51da1b1e4ca7d01bdbf877a8ab439737165f955e20e5b962b8e9c
ssdeep: 98304:5aCKNfRtWrasJFtEnEDOEZltSRcZKO864eJ:83crB+EiEZ+NO1t
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T1C2063323929998F7D9113AB84C42F3996B2D6F212C21C553EEE53989FD293D13C386D3
sha3_384: 1d235fadd37d0994bf0e4e760aa0c65083d48a03667b560b4bfc1a30aabd2b166ef29e89e6a4f124ac0e6fe7b07ae418
ep_bytes: 558becb9130000006a006a004975f951
timestamp: 1992-06-19 22:22:17

Version Info:

Translation: 0x0000 0x04b0
Comments: Sony DualShock 4 to Microsoft Xinput controller mapper
CompanyName: Ryochan7
FileDescription: DS4Windows
FileVersion: 3.0.18
InternalName: DS4Windows.dll
LegalCopyright: Copyright © Scarlet.Crush Productions 2012, 2013; InhexSTER, HecticSeptic, electrobrains 2013, 2014; Jays2Kings 2013, 2014, 2015, 2016; Ryochan7 2017, 2018, 2019, 2020, 2021
OriginalFilename: DS4Windows.dll
ProductName: DS4Windows
ProductVersion: 3.0.18
Assembly Version: 3.0.18.0

Malware.AI.1526175635 also known as:

BkavW32.AIDetectMalware
LionicTrojan.Win32.EquationDrug.tphT
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKDZ.101298
SkyhighBehavesLike.Win32.Dropper.wc
McAfeeArtemis!D702ECA00EAC
Cylanceunsafe
ZillyaTrojan.SchoolGirl.Win32.86
SangforTrojan.Win32.Agent.V36u
AlibabaTrojan:Win32/Bundled.54549097
BitDefenderThetaGen:NN.ZelphiF.36680.NJ3@a4eUPne
SymantecML.Attribute.HighConfidence
APEXMalicious
CynetMalicious (score: 100)
BitDefenderTrojan.GenericKDZ.101298
AvastWin32:Malware-gen
SophosMal/Generic-S
VIPRETrojan.GenericKDZ.101298
EmsisoftTrojan.GenericKDZ.101298 (B)
IkarusPUA.Bundled.Toolbar
JiangminTrojan.Qhost.it
WebrootW32.Trojan.Gen
Kingsoftmalware.kb.a.839
MicrosoftTrojan:Win32/Wacatac.B!ml
ArcabitTrojan.Generic.D18BB2
GDataTrojan.GenericKDZ.101298
VaristW32/ABTrojan.KEHF-6114
VBA32BScope.Trojan.Qhost
ALYacTrojan.GenericKDZ.101298
MalwarebytesMalware.AI.1526175635
TrendMicro-HouseCallTROJ_GEN.R002H09A524
RisingTrojan.Generic@AI.100 (RDML:wt/cxsKwOGRgXDxQYsFF7Q)
SentinelOneStatic AI – Suspicious PE
MaxSecureTrojan.Malware.206611978.susgen
FortinetW32/PossibleThreat
AVGWin32:Malware-gen
DeepInstinctMALICIOUS
CrowdStrikewin/grayware_confidence_60% (D)

How to remove Malware.AI.1526175635?

Malware.AI.1526175635 removal tool
  • Download and install GridinSoft Anti-Malware.
  • Open GridinSoft Anti-Malware and perform a “Standard scan“.
  • Move to quarantine” all items.
  • Open “Tools” tab – Press “Reset Browser Settings“.
  • Select proper browser and options – Click “Reset”.
  • Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment